Privacy Policy
Last updated: 10 September 2026
Mursil is a Chrome extension that finds business contact details and sends outreach email
from the user's own mailbox. This page explains exactly what it collects, where that goes,
and what it never does.
The short version. Your lead lists, emails and campaigns are stored in
your own browser, not on our servers. What reaches our server is only what a particular
action needs — sending an email, checking an address, or verifying a licence key. We do not
sell data, we do not read your mailbox, and we do not use your leads for anything of our
own.
What is stored in your browser
Kept in Chrome's local extension storage, on your computer. We cannot read it, and it is not
sent anywhere unless one of the actions below requires it.
- Business contact details you collect: name, website, publicly listed email address, phone, city, rating
- Lists you upload yourself, and any columns in them
- Your email templates, follow-up sequences and campaign progress
- Your sender profile: name, company, email address, signature
- Your SMTP settings, including the mailbox password
- Your licence key, and a random device identifier generated on installation
- Addresses on your do-not-contact and replied lists
Uninstalling the extension deletes all of it.
What is sent to our server, and when
-
Activating or checking a licence. Sent: licence key, device identifier, and
a coarse device fingerprint (browser, language, timezone). Kept: the key, its status, and
when it was last used.
-
Sending an email. Sent: your SMTP host, username and password; the
recipient address; the subject and body. Kept: nothing but a count, and — if tracking is
on — a one-way hash of the recipient address. The credentials and the message are used to
deliver the mail and then discarded.
-
Full email validation. Sent: the addresses you asked to check. Kept: only
how many credits were spent. The addresses are not stored.
-
Writing an email with AI. Sent: the instructions you type and the draft you
are working on. Kept: nothing.
-
Open and click tracking (optional). Sent: nothing from you — the
recipient's mail client loads a tracking image. Kept: that an email was opened or a link
clicked, against a hashed recipient.
Who else sees anything
- Supabase hosts our database and server functions.
- MillionVerifier performs full email validation. Addresses you validate are sent to them for checking.
- Groq and Anthropic power the AI email writer, and receive only the instructions and draft you give it.
- Paddle processes payments as our Merchant of Record and receives your billing details. We never see your card.
- Your own SMTP provider delivers your email, exactly as it would if you sent it from your normal mail client.
Nobody else. We do not sell, rent or share your data with advertisers or data brokers.
What Mursil does not do
- It does not read your mailbox. Replies go to you and we never see them.
- It does not track your browsing. The extension reads only the pages a run you started is visiting.
- It does not store the contact details you collect on our servers.
- It does not send you marketing.
Why it needs the permissions it asks for
- Host permissions — to open the business websites found in a search and read the contact address published on them. Which sites those will be is not known before a search runs.
- scripting — to read the visible text of those pages and extract business names and email addresses.
- tabs — to open a background tab per site and close it when finished.
- storage, unlimitedStorage — to keep your lists and settings in your browser. Large lists exceed the standard quota.
- alarms — to continue a campaign after Chrome suspends the extension in the background.
Your responsibilities
Mursil collects contact details that businesses publish themselves. How you use them is up to
you, and the law that applies is the law where your recipients are. Every email Mursil sends
carries a way to opt out, and anyone who opts out is never contacted again. Beyond that, you
are the sender and the responsibility is yours. See our
Terms of Service.
Deleting your data
Uninstalling the extension removes everything held in your browser. To have your licence
record and its history deleted from our server, message us and it will be removed.
Changes
If this policy changes in a way that affects what is collected, the date at the top changes
and subscribers are told by email.
Contact
support@mursil.online ·
WhatsApp +92 323 2877850